AbuseIPDB » 122.168.189.21

122.168.189.21 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 37%: ?

37%

ISP	Bharti Airtel Ltd.
Usage Type	Unknown
Hostname(s)	abts-mp-dynamic-021.189.168.122.airtelbroadband.in
Domain Name	airtel.in
Country	India
City	Bhopal, Madhya Pradesh

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 122.168.189.21

Whois 122.168.189.21

IP Abuse Reports for 122.168.189.21:

This IP address has been reported a total of 35 times from 16 distinct sources. 122.168.189.21 was first reported on February 21st 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
JuicyJ	2024-09-09 12:32:32 (1 day ago)	Looking for WordPress vulnerabilities	Web App Attack
URAN Publishing Service	2024-09-09 05:28:46 (1 day ago)	122.168.189.21 - - [09/Sep/2024:08:28:43 +0300] "GET /wp-login.php HTTP/1.1" 404 2619 "-" "Mozilla/5 ... show more122.168.189.21 - - [09/Sep/2024:08:28:43 +0300] "GET /wp-login.php HTTP/1.1" 404 2619 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 122.168.189.21 - - [09/Sep/2024:08:28:44 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
TPI-Abuse	2024-08-30 11:37:34 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 122.168.189.21 (abts-mp-dynamic-021.189.168.122 ... show more(mod_security) mod_security (id:225170) triggered by 122.168.189.21 (abts-mp-dynamic-021.189.168.122.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 07:37:29.573458 2024] [security2:error] [pid 14460:tid 14460] [client 122.168.189.21:50120] [client 122.168.189.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.quickasawink.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quickasawink.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZtGu-XXO0xClUVLXFdKvOwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-27 11:10:33 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /xmlrpc.php HTTP/1.1	Hacking Web App Attack
URAN Publishing Service	2024-08-26 06:06:57 (2 weeks ago)	122.168.189.21 - - [26/Aug/2024:09:06:53 +0300] "GET /wp-login.php HTTP/1.1" 404 2617 "-" "Mozilla/5 ... show more122.168.189.21 - - [26/Aug/2024:09:06:53 +0300] "GET /wp-login.php HTTP/1.1" 404 2617 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 122.168.189.21 - - [26/Aug/2024:09:06:55 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
MAGIC	2024-08-20 09:07:04 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
URAN Publishing Service	2024-08-13 08:12:18 (4 weeks ago)	122.168.189.21 - - [13/Aug/2024:11:12:17 +0300] "GET /wp-login.php HTTP/1.1" 404 2624 "-" "Mozilla/5 ... show more122.168.189.21 - - [13/Aug/2024:11:12:17 +0300] "GET /wp-login.php HTTP/1.1" 404 2624 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 122.168.189.21 - - [13/Aug/2024:11:12:17 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
axllent	2024-08-08 10:12:18 (1 month ago)	Wordpress login attempts	Brute-Force Web App Attack
Steve	2024-08-06 10:03:15 (1 month ago)	Attempts against non-existent wordpress site	Brute-Force Web App Attack
MAGIC	2024-07-25 06:03:16 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
axllent	2024-06-26 11:02:55 (2 months ago)	Wordpress login attempts	Brute-Force Web App Attack
Anonymous	2024-06-10 12:24:57 (3 months ago)	Malicious activity detected	Hacking Web App Attack
Cloudkul Cloudkul	2024-06-01 08:42:04 (3 months ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
MAGIC	2024-06-01 06:14:08 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Hirte	2024-05-28 06:04:12 (3 months ago)	HHV: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack